Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: Sgnrn0mG2iFCrK3gS7ugLV98+qLzyubzQtH6KAXV4U8=
Subject key identifier: 1A:DC:29:65:DF:34:B2:C6:D4:00:5B:28:BB:AF:47:32:5C:23:10:2F
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 019D98BD687BBE981021F5A133376DC244DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:42 +0000
Manifest this update: Fri 17 Apr 2026 00:00:42 +0000
Manifest next update: Sat 18 Apr 2026 00:00:42 +0000
Files and hashes: 1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: 8Dif3BDn8CWAodLMxUCc6lanNw70awsPITazm1OD1gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:68:7b:be:98:10:21:f5:a1:33:37:6d:c2:44:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Apr 17 00:00:42 2026 GMT
Not After : Apr 18 00:00:42 2026 GMT
Subject: CN=1adc2965df34b2c6d4005b28bbaf47325c23102f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:28:e0:c8:7a:33:e5:9c:2a:f6:eb:85:c8:
84:24:ca:ae:be:82:cb:8b:2f:03:6a:dd:d9:ce:4e:
73:3a:a3:0e:02:99:48:9c:b8:db:f3:71:ff:7e:b6:
e8:e9:e8:ae:52:0c:ae:e6:1f:1f:94:c7:a3:dc:93:
87:97:bc:20:b5:b0:66:78:7e:55:fd:ec:c8:71:f3:
cb:bd:77:96:a6:10:ec:90:a3:81:57:af:45:77:4a:
9a:b8:c7:36:fa:d7:b0:49:72:99:2d:25:3a:7b:47:
e3:91:78:e7:d2:3b:e8:b1:85:ef:0a:58:56:aa:c7:
50:43:09:c3:74:e9:57:3e:26:aa:07:62:d5:e2:8e:
69:14:da:10:99:11:d3:f0:c2:c0:b2:60:04:68:19:
b7:2c:d6:bb:cb:c2:b4:08:1b:1e:e5:77:94:96:ad:
36:cd:1a:27:3a:b5:c9:5b:fd:0a:2d:6b:6a:46:46:
24:d1:01:f4:a2:66:44:ac:0d:18:43:50:b2:63:31:
25:4c:f8:7d:00:69:d6:a6:02:b7:d7:5d:45:04:fa:
d1:59:6f:a5:db:9d:d9:a1:ff:2f:a3:8e:af:64:57:
80:eb:4f:99:78:74:18:d8:50:fe:cb:ab:2a:41:05:
dc:5b:69:6d:eb:45:74:51:58:7c:a1:cf:30:7b:12:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:29:65:DF:34:B2:C6:D4:00:5B:28:BB:AF:47:32:5C:23:10:2F
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bc:07:07:96:61:48:c6:cd:6a:aa:da:be:36:3d:fd:b7:80:
21:34:92:1c:e2:6b:3d:ee:31:70:a1:24:9d:f0:94:c3:25:91:
a9:7c:aa:58:51:f3:25:eb:9e:31:c3:e1:78:07:72:8f:b0:da:
e8:63:ae:86:10:49:0d:47:bb:98:b0:6e:d5:f2:8a:03:5d:a0:
7b:bd:92:78:17:d1:2e:02:fc:dc:3c:71:21:d5:55:af:86:61:
d3:23:8b:16:02:56:3d:5a:fd:19:60:d1:7d:71:77:87:ce:0f:
80:91:06:8a:d1:7f:4d:79:a4:63:c0:23:03:34:61:d7:ca:01:
6d:60:60:b7:6a:24:76:6e:54:56:b9:74:38:b0:c9:41:e3:8c:
99:cb:8f:3d:dc:16:83:00:3d:3f:2c:ef:fb:d7:72:93:88:86:
1b:e2:71:93:61:20:e8:45:3f:4e:53:0a:51:d5:8a:c1:3b:03:
f9:50:17:93:df:f6:0e:e3:d3:b8:53:a8:c9:1e:64:04:25:16:
76:ff:22:9f:13:60:a2:97:1c:50:cd:2e:7c:60:b7:7f:46:33:
3f:fe:31:b3:e7:62:d4:02:83:d3:45:d3:b5:60:b7:08:ef:50:
03:f1:7e:02:7b:4b:d4:c2:f4:ee:43:47:b4:34:82:66:cb:a9:
2f:f4:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:47 2026 by rpki-client